DigiD Machtigen gets smarter sorting as Netherlands races eIDAS deadline

The Dutch government's digital authorization platform got a targeted but meaningful upgrade this morning when Logius deployed DigiD Machtigen version 9.3.0, adding the ability to sort the authorization overview by expiration date, request date, or activation date. The change goes live during a five-month runway before the Netherlands must make a European Digital Identity Wallet available to its citizens under the revised eIDAS 2.0 regulation — a deadline that makes even incremental improvements to the existing authorization infrastructure consequential.

Logius deployed the release during a scheduled maintenance window that ran from midnight to 6:00 a.m. UTC, keeping DigiD Machtigen offline for the upgrade while leaving the Berichtenbox message inbox and Lopende Zaken available to connected government organizations throughout.

Sorting Authorizations by Date: What Changed and Why It Matters

Before version 9.3.0, the machtigingenoverzicht — the authorization overview screen where Dutch citizens manage active delegations — offered limited reordering options. The new release lets users sort the list by three date types: when an authorization expires, when it was requested, and when it was activated.

The practical benefit is most visible for citizens juggling multiple active delegations. A caregiver who has authorized a family member to handle both healthcare matters and tax filings, for instance, now sees at a glance which of those authorizations is approaching its end date — rather than manually scanning a list to reconstruct the timeline. Logius described the purpose plainly: users can more quickly identify which authorizations are expiring soon, recently requested, or recently activated.

That kind of at-a-glance clarity matters because DigiD Machtigen authorizations are deliberately narrow in scope: each one covers a specific service for a specific time period, not a blanket power of attorney. A caregiver managing affairs for an elderly relative may hold separate authorizations for the Tax Administration, a health insurer, a pension provider, and a municipal service — each with its own expiry date. Letting any one of them lapse can interrupt access to a critical service precisely when continuity is most needed.

The technical implementation sits atop DigiD Machtigen's existing SAML-based architecture. When a citizen authenticates through DigiD — which returns only the burgerservicenummer (BSN), the Dutch national citizen identification number, to the receiving service — and accesses the authorization overview, the platform queries its delegation records and renders the machtigingenoverzicht. The 9.3.0 sorting feature adds date-type columns to that rendered view, enabling the platform to reorder those records by the chosen date field.

How DigiD Machtigen Works at Scale

DigiD Machtigen — rendered in English as DigiD Authorization — allows one individual to act on behalf of another within the Netherlands' digital government ecosystem. A citizen logs in with their own DigiD or a recognized eID from another European country, selects the organization and task for which authorization is being granted, and completes the request; the authorizing party then receives an activation code, as described in the Netherlands Worldwide authorization guide.

DigiD is the authentication foundation underneath this: a BSN-linked identity management platform that Dutch government agencies use to verify the identities of residents online. The Tax and Customs Administration has required electronic submissions via DigiD since 2006. Usage has expanded steadily to cover healthcare insurers, pension providers, social benefit services, educational finance systems, and an increasing array of municipal services.

In 2024, DigiD logged 550 million logins — a 15 percent increase over the previous year — with DigiD Machtigen used 16 million times that year for delegation-based access, according to Logius's 2024 annual accountability report. In 2025, DigiD usage grew further to 645 million logins, while DigiD Machtigen was applied 16.6 million times over the course of the year, per Logius's June 2026 annual usage announcement.

The DigiD scheme is managed by Logius, the digital government service of the Netherlands' Ministry of the Interior and Kingdom Relations (BZK), which maintains government-wide ICT solutions and common standards for communication between authorities, citizens, and businesses.

Five Months to the EUDI Wallet Deadline

The 9.3.0 release lands during a period when Logius must maintain DigiD Machtigen as a reliable workhorse while simultaneously preparing for a fundamental shift in Dutch digital identity infrastructure. Regulation (EU) 2024/1183 — known as eIDAS 2.0 — entered into force on May 20, 2024, and requires every EU member state to make at least one recognized digital identity wallet available to citizens by December 24, 2026.

The Netherlands' answer is the NL Wallet, built on the DigiD foundation, which is expected to be available to citizens in app stores by the end of 2026. The NL Wallet uses OpenID4VP, the protocol designed to enable EUDI Wallets from different member states to interoperate at European relying parties — a significant architectural departure from the SAML-based connective tissue that currently links DigiD, DigiD Machtigen, and service providers through the DigiD CombiConnect specification, as analyzed in CARE's March 2026 eIDAS and NL Wallet overview.

Government organizations in the Netherlands are expected to accept the wallet as an identification method alongside DigiD from the end of 2026; financial institutions, healthcare providers, and other regulated sectors follow by December 2027.

Dutch sources have flagged that the NL Wallet's first release may not satisfy all regulatory requirements. That makes the current DigiD Machtigen platform's continuous improvement track — of which 9.3.0 is the latest increment — more than routine housekeeping. It is the maintenance of an aging-but-functional authorization layer that cannot be replaced on a fixed schedule and must remain fully usable through a two-year transition of growing complexity.

What DigiD Machtigen Still Cannot Do

The authorization landscape carries a documented gap that 9.3.0 does not address: legal representation. The current DigiD Machtigen design covers voluntary authorizations — one citizen choosing to empower another — but does not fully support the category of court-mandated or legal representation used when a family member acts under formal guardianship (bewindvoering) or when parents represent children under 11. The Association of Dutch Municipalities (VNG) has noted that the current platform does not feed back formal representative authority in these cases.

That gap is significant precisely because the users who need formal legal representation are often those least able to manage the administrative friction of an inadequate digital tool — elderly residents under guardianship, people with cognitive disabilities, and children whose parents need reliable digital access to government services on their behalf.

Logius's 2025 annual report noted that research into the future of DigiD Machtigen was conducted during the year, consistent with planning for the NL Wallet transition. Whether the legal representation gap is addressed before the EUDI Wallet takes over part of DigiD Machtigen's workload remains to be seen.

Hardening the Platform Against Disruption

The release also lands in a threat environment that Logius has publicly characterized as increasingly sophisticated. Since early 2025, Logius has documented a shift in DDoS attack patterns targeting DigiD and its associated services: attacks have moved away from high-volume brute-force traffic floods toward smarter, more targeted, and less predictable patterns that are harder to detect and require different defense strategies.

On January 14-15, 2025, a coordinated DDoS attack rendered DigiD and DigiD Machtigen inaccessible for more than five hours, disrupting tax filings, SVB benefit claim access, healthcare insurance portals, educational finance systems, and pension management platforms simultaneously — illustrating how single-point authentication infrastructure amplifies the impact of any successful disruption.

The maintenance window design in 9.3.0 reflects Logius's approach to minimizing that vulnerability: deploying changes during off-peak overnight hours while preserving message inbox availability for connected organizations throughout the window.

Logius has shipped a consistent cadence of incremental releases: 9.03 in February (error message clarity and eHerkenning login integration improvements), 9.04 in February (technical continuity changes), 9.1.0 in May, 9.2.0 in June (technical changes only), and now 9.3.0 in July — the first release since the 9.0 series began in December 2025 to add a user-facing functional change to the authorization overview itself.

Continuity as a Policy Statement

Each release in Logius's continuous improvement cycle represents a dual commitment: hardening the platform against threats while lowering friction for the millions of Dutch citizens who depend on it to manage their affairs with the state — whether filing taxes, requesting benefits, or arranging for a trusted person to do it on their behalf.

For the 800,000 citizens who received authorization renewal letters in January 2025 as existing delegations approached expiry, the administrative burden of managing a portfolio of time-limited, service-scoped authorizations is not abstract. The 9.3.0 sorting feature is a direct response to that concrete management problem — not a headline transformation of the platform, but an incremental reduction in the friction that causes critical delegations to lapse unnoticed.

With five months remaining before the eIDAS 2.0 wallet mandate takes effect and the NL Wallet moves from development to deployment, the authorization infrastructure serving 16.6 million annual delegation interactions must remain reliable enough to carry the load — and usable enough to ensure that the citizens who depend on it can manage it without missing an expiry date.

Frequently Asked Questions

What does DigiD Machtigen version 9.3.0 change for Dutch citizens?

Version 9.3.0 adds sorting controls to the authorization overview screen in DigiD Machtigen. Citizens can now sort their active authorizations by expiration date, request date, or activation date — making it easier to see at a glance which delegations are about to expire, which were recently set up, and which have just been activated. The change is most useful for users who manage multiple active delegations across different government services and need to stay on top of renewal timelines.

How does DigiD Machtigen's authorization system work technically?

DigiD Machtigen uses the SAML (Security Assertion Markup Language) protocol, specifically the Dutch eID SAML profile, to link the authenticating party (DigiD), the authorization registry (DigiD Machtigen's Bevoegdheidsverklaringsdienst, or BVD), and the receiving service provider through a component called DigiD CombiConnect. When an authorized representative logs in on behalf of another citizen, DigiD returns the BSN — the Dutch national citizen identification number — to the service, while DigiD Machtigen adds a delegation assertion confirming the representative's scope and the period for which the authorization is valid. Each authorization is deliberately scoped: it covers one specific task, for one specific service, for one defined time period — not a general power of attorney.

What is the eIDAS 2.0 deadline and how does it affect DigiD?

Regulation (EU) 2024/1183 — eIDAS 2.0 — requires every EU member state to make at least one recognized digital identity wallet available to citizens by December 24, 2026. The Netherlands is building the NL Wallet on its DigiD infrastructure to meet this requirement. DigiD and DigiD Machtigen will continue operating alongside the wallet; they are not being replaced immediately. However, the December 2026 deadline means Logius must simultaneously maintain the current authorization platform at full reliability while building and certifying the next-generation identity layer — which is why releases like 9.3.0 carry more operational weight than their scope alone might suggest.

Can DigiD Machtigen handle legal representation, such as for people under guardianship?

Not fully, as of version 9.3.0. DigiD Machtigen currently handles voluntary authorization — one citizen choosing to empower another for a specific service and time period. It does not yet fully support formal legal representation cases, such as court-mandated guardianship (bewindvoering) or parental representation of children under 11. The Association of Dutch Municipalities (VNG) has documented this gap. Logius's 2025 annual report noted that research into the future of DigiD Machtigen was conducted during the year, but the legal representation functionality remains incomplete.